Cybersecurity (General)

MosaicRegressor: Second-ever UEFI Rootkit Found In The Wild The second-ever UEFI rootkit used in the wild was found by security researchers during investigations surrounding attacks from 2019 against two non-governmental organizations (NGOs). UEFI (Unified Extensible Firmware Interface) firmware allows for highly persistent malware given that it’s installed within SPI flash storage soldered Read more…

Crypto-mining Malware Adds Linux Password Stealing Capability The TeamTNT cybercrime group has recently updated its crypto-mining worm with password-stealing capabilities and with an additional network scanner to make it easier to spread to other vulnerable devices. While known mostly for actively targeting Docker instances to use compromised systems for unauthorized Read more…

New Ransomware Vaccine Kills Programs Wiping Windows Shadow Volumes A new ransomware vaccine program has been created that terminates processes that try to delete volume shadow copies using Microsoft’s vssadmin.exe program, Every day, Windows will create backups of your system and data files and store them in Shadow Volume Copy snapshots. Read more…

Online Avatar Service Gravatar Allows Mass Collection Of User Info A user enumeration technique discovered by security researcher Carlo Di Dato demonstrates how Gravatar can be abused for mass data collection of its profiles by web crawlers and bots. Gravatar is an online avatar service that lets users set and use a profile picture (avatar) Read more…

The Week in Ransomware – October 2nd 2020 – Healthcare Under Attack This week started with a bang as a large hospital chain was hit by a ransomware attack that disrupted the healthcare industry. We first learned of this Ryuk Ransomware attack on Universal Health Services (UHS) on Monday morning when doctors, nurses, Read more…

Grindr Fixed A Bug Allowing Full Takeover Of Any User Account Grindr has fixed a security flaw that could have allowed attackers to easily hijack any Grindr account if they knew the user’s email address. Grindr is a social networking platform for gay, bi, trans, and queer people active since its Read more…

Google Now Discloses Android vulnerabilities For 3rd-party Devices Google today announced the launch of a new program specifically designed to deal with security vulnerabilities the company finds in third-party Android devices and software serviced by Android OEMs. “Google’s Android Security & Privacy team has launched the Android Partner Vulnerability Initiative (APVI) to Read more…

HP Device Manager Backdoor Lets Attackers Take Over Windows Systems HP released a security advisory detailing three critical and high severity vulnerabilities in the HP Device Manager that could lead to system takeover. HP Device Manager is used by admins to remotely manage HP thin clients, devices that use resources from a central Read more…